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(57) Abstract 

A wireless communication system includes a multi-functional portable device and more than one host systems so as to accomplish 
various functions. The portable device performs at least one specific function with a host system and the host system has a transceiver and 
a host apparatus. Specifically, in order to achieve the purposes, the portable device includes a storage unit for storing at least a portion of 
information required in performing the specific function and a transceiver unit for transmitting the information to the host system in a form 
of an encrypted signal. The transceiver includes a control unit for decrypting the encrypted signal to reconstruct the information and a data 
interfacing unit for providing the reconstructed information to the host apparatus. 
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WIRELESS PORTABLE DEVICE CAPABLE OF PERFORMING 
VARIOUS FUNCTIONS WITH ENHANCED SECURITY 

TECHNICAL FIELD OF THE INVENTION 

5 

The present invention relates to a wireless portable 
communications system; and, more particularly, to a 
wireless portable device capable of performing such 
various functions as purchasing goods, payment, banking 
10 transaction or the like with an improved security. 

BACKGROUND ART 

Nowadays, as wireless communications techniques 
15 develop, wireless portable or mobile terminals such as 
cellular telephones have been widely used and it has 
also become possible to accomplish a data transmission 
as well as a voice signal transmission therethrough. 
Moreover, the use of the wireless portable terminals 
20 are gradually being extended to various applications in 
the art such as an internet, banking transactions and 
the like. 

In addition to the extended use of the wireless 
portable terminals, machine- readable identification 

25 cards, such as credit cards, debit cards, point of sale 
(POS) cards, prepaid cards, automatic teller machine 
(ATM) cards, pass cards and the like, have become 
prevalent in such applications as performing credit 
sales transactions, payment of fees and gaining access 

30 to a restricted area. 

For instance, in commercial banking, unattended 
banking terminals such as ATMs permit certain 
transactions- These transactions include accepting 
deposits, dispensing cash, transferring funds from one 

35 account to another, and making payments on credit card, 
utility or other accounts, or on mortgage or 
installment loans and the like. The customer is 
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required to present an identification card, which is 
often formed of a plastic medium and contains machine - 
readable information therein. This information 

includes, but is not limited to, the customer's account 
5 number, the identification number of the bank or 
institution, expiration date, credit limit, account 
balance and types of transactions authorized. The 
information is preferably contained in the card in the 
form of invisible magnetically recorded indicia, or 
could be contained in embossed indicia, apertures, or 
electrically conducting segments. 

Further, the customer can perform those banking 
transactions with a telephone, a computer system, or 
the like without using any card. In this case, the 
customer has to input identification information of the 
customer through, e.g., the telephone, in order to 
initiate authorized banking transactions. 

Therefore, for the above two cases of the 
unattended and the tele-banking transactions, when 
determining whether or not the customer is an 
authorized holder of the identification card presented 
at the banking terminal or an authorized tele -banking 
customer, secret data, such as a password or an 
identification number, along with account number and 
other transaction information are transmitted to a host 
or central banking computer over a communication line. 
However, by monitoring the communication line, it is 
possible for an unauthorized person to pick up the 
secret data of a customer and, with possession of the 
identification card, effect unauthorized transactions. 
Also, there is a disadvantage for the customer to have 
to remember the secret data. 

Therefore, to overcome the above drawbacks, there 
are needs to enhance the security in the above and 
other transactions and further to make the customer 
easily perform the transactions without remembering the 
secret data while taking advantage of the convenience 
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of the wireless portable terminals. 

DISCLOSURE OF THE INVENTION 

5 It is, therefore, one object of the present 

invention to provide a multi-functional portable device 
for performing various functions in conjunction with 
more than one different host systems so as to take 
advantage of the convenience of portable devices and 

10 improve its transaction security. 

Another object of the present invention is to 
provide a transceiver, incorporated with a host system, 
for effectively enabling a function to be carried out 
between the host system and the multi-functional 

15 portable device. 

Still another object of the present invention is 
to provide a wireless communication system including a 
multi-functional portable device and more than one host 
systems each of which has a transceiver and a host 

20 apparatus in order to accomplish various functions 
therethrough and enhance its transaction security. 

In accordance with one aspect of the present 
invention, there is provided a multi-functional 
portable device for performing various functions in 

25 conjunction with more than one different host systems, 
the portable device performing at least one specific 
function with a host system and communication between 
the portable device and the host system being carried 
out by wireless signals, comprising: 

30 a storage unit for storing at least a portion of 

information required in performing said at least one 
specific function; and 

a transceiver unit for transmitting the 
information to the host system in a form of an 

35 encrypted signal. 

In accordance with another aspect of the present 
invention, there is provided a transceiver, 
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incorporated with a host apparatus, for enabling a 
function to be carried out between the host apparatus 
and a multi-functional portable terminal, the portable 
terminal transmitting an encrypted signal representing 
5 information required in performing the function, 
comprising : 

a control unit for decrypting the encrypted signal 
to reconstruct the information; and 

a data interfacing unit for providing the 
10 reconstructed information to the host apparatus. 

In accordance with yet another aspect of the 
present invention, there is provided a wireless 
communication system including a multi - functional 
portable device and more than one host systems, wherein 
15 the portable device performs various functions in 
conjunction with the host systems, the portable device 
performing at least one specific function with a host 
system and the host system having a transceiver and a 
host apparatus, the portable device comprising: 
20 a storage unit for storing at least a portion of 

information required in performing said at least one 
specific function; and 

a transceiver unit for transmitting the 
information to the host system in a form of an 
25 encrypted signal, and 

the transceiver comprising: 

a control unit for decrypting the encrypted signal 
to reconstruct the information; and 

a data interfacing unit for providing the 
30 reconstructed information to the host apparatus. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The above and other objects and features of the 
35 present invention will become apparent from the 
following description of preferred embodiments given in 
conjunction with the accompanying drawings, in which: 
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Fig. 1 illustrates a schematic block diagram of a 
wireless communications system in accordance with the 
present invention ; 

Fig. 2 shows a first embodiment of the present 
5 invention ; 

Fig. 3 depicts a second embodiment of the present 
invention; 

Fig. 4 describes a third embodiment of the present 
invention; 

10 Fig. 5 provides a fourth embodiment of the present 

invention; 

Fig. 6 represents a fifth embodiment of the 
present invention; 

Fig. 7 shows a sixth embodiment of the present 
15 invention; and 

Fig. 8 presents a seventh embodiment of the 
present invention. 

MODES OF CARRYING OUT THE INVENTION 

20 

Referring to Fig. 1, there is provided a schematic 
block diagram of a wireless communications system for 
performing various functions . The system comprises a 
portable terminal 100, a transceiver 200 and a host 

25 apparatus 300. The host apparatus 300 can be an 
automatic engine starter, an actuator, an ATM, a host 
banking computer, a transport card terminal, a vending 
machine, a value-added network (VAN) terminal or the 
like, which will be illustrated hereinbelow. 

30 In Fig. 1, the portable terminal 100 includes an 

antenna 101, a fingerprint scanning unit 110, a data 
entry unit 120, a display unit 130, an interfacing unit 
140, a control unit 150, a storage unit 160, a direct 
or local communication transceiver unit 170, a base 

35 station communication transceiver unit 180 and a power 
supply unit 190. 

The fingerprint scanning unit 110 scans a 
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fingerprint of a user and converts the scanned 
fingerprint image to electrical signals. 

By using the data entry unit 120, the user can 
input data required in performing a selected function 
5 at the portable terminal 100. 

The display unit 130 shows message data 
representing the processing status and information 
required to be reported to the user during the 
performance of the selected function. 

10 The interfacing unit 140, connected between the 

control unit 150 and the fingerprint scanning, data 
entry and display units 110, 12 0 and 13 0, transmits 
signals or data, required in performing the selected 
function, between the units connected thereto, e.g., 

15 units 110, 120, 130 and 150. 

The control unit 150 generally controls the 
operations of other components of the portable terminal 
100. Specifically, if fingerprint data in the form of 
electrical signals are provided thereto via the 

20 interfacing unit 140 from the fingerprint scanning unit 
110, the control unit 150 compares the fingerprint data 
with registered fingerprint data stored in the storage 
unit 160 to verify whether or not the user is an 
authorized user. 

25 If the user is verified as a result of the 

comparison, the control unit 150 encodes or encrypts 
transaction information to output the encrypted 
information to the local communication transceiver unit 
170 or the base station communication transceiver unit 

3 0 180 depending on applications, as will be described 
with reference to Figs . 2 to 8 . The transaction 
information may include transaction data representing 
the contents of the transaction to be carried out, 
personal identification data which includes, but is not 

35 limited to, a card number, an account number, a name of 
the user, password or a combination thereof, the 
fingerprint data, current time data or a combination 
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thereof according to a function to be performed. 

In the present invention, the transaction 
information includes one of the fingerprint data of the 
user and the registered fingerprint data. In the 
5 preferred embodiment of the invention, the transaction 
information contains the registered fingerprint data 
stored in the storage unit 160 . 

If the authorized user operates the key pads of 
the data entry unit 120, numeral signals corresponding 
10 to the operated key pads or preset data corresponding 
to the operated key pads may be also encrypted and 
included in the above transaction information. 

Herein, the current time data represent year, 
month, hour, minute and second. In case of a code 
15 division multiple access (CDMA) cellular phone, the 
current time is set by receiving time synchronous data 
provided by a base station. The current times of the 
base stations are synchronized under the control of a 
satellite . 

20 In a preferred embodiment of the present 

invention, the fingerprint data can be representative 
feature data of the fingerprint of the user in order to 
reduce the volume of the data . 

The storage unit 160 stores, but not limited to, 

25 the registered fingerprint data, basic personal 
identification data which may include, but are not 
limited to, e.g., a card number, an account number, 
password or the like needed for performing each 
function, a cryptographic algorithm, various 

3 0 communication programs and so on, and can be of a non- 
volatile memory, e.g., a flash memory, or preferably of 
a volatile memory having a power retention capability. 
In case a volatile memory is employed as the storage 
unit 160, the volatile memory is preferably associated 

35 with a subsidiary power storage device capable of 
maintaining the stored data in the storage unit 160 for 
a prolonged period when the power supply unit 190 is 
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discharged or unloaded. For security, the volatile 
memory is further provided with an associated device 
for erasing the data or information stored therein 
against the attempts of dissembling the portable 
5 terminal 100 or breaking into the memory system to take 
out the stored data, thereby preventing the stored data 
from being revealed to an unauthorized user when the 
portable terminal 100 is lost or stolen. 

To transmit the encrypted information, the control 

10 unit 150 selects either the direct or local 
communication transceiver unit 170 or the base station 
communication transceiver unit 180 according to a 
function chosen among the functions that can be 
accomplished through a local area communication or a 

15 long-distance communication. 

To perform the local area communication with the 
transceiver 2 00, the direct or local communication 
transceiver unit 170 modulates the encrypted 
information delivered from the control unit 150 to, 

20 e.g., radio frequency (RF) signals and transmits the 
modulated signals via the antenna 101 to the 
transceiver 200. Furthermore, optionally, during the 
performance of the selected function, the direct 
communication transceiver unit 170 may receive signals 

25 from the transceiver 200 and demodulate the received 
signals so as to provide the demodulated signals to the 
control unit 150 . 

On the other hand, in order to accomplish the 
long-distance communication with the transceiver 200, 

30 there needs a base station (not shown) to relay the 
transmission signals between the portable terminal 100 
and the transceiver 200. The base station 

communication transceiver unit 180 converts the 
encrypted information transferred from the control unit 

35 150 to, e.g., CDMA signals; modulates the converted 
signals into, e.g., RF signals; and transmits the 
modulated signals via the antenna 101 to a base 
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station (not shown). In addition, during the 

performance of the selected function, the base station 
communication transceiver unit 180 may receive signals 
from the transceiver 200 via the base station and 
5 demodulate the received signals to thereby provide the 
demodulated signals to the control unit 150. 

The control unit 150 can choose either the direct 
or local communication transceiver unit 170 or the base 
station communication transceiver unit 180 according to 

10 the characteristic of the selected function to be 
performed by the portable terminal 100. That is, if 
the selected function is adapted to the local area 
communication, the direct or local communication 
transceiver unit 170 is chosen and, if otherwise, the 

15 base station communication transceiver unit 180 is 
selected. 

The power supply unit 190 provides a DC voltage to 
each component of the portable terminal 100 and is 
preferably a rechargeable battery. 

20 Meanwhile, as illustrated in Fig. 1, the 

transceiver 200 comprises an antenna 2 01, a transceiver 
unit 210, a control unit 220, a storage unit 230, a 
signal input /output (I/O) unit 240 and a data 
interfacing unit 250. 

25 The transceiver unit 210 receives the transmission 

signals delivered from the direct communication 
transceiver unit 170 or the base station communication 
transceiver unit 180 of the portable terminal 100 via 
the communication channel; demodulates the received 

30 signals; and transfers the demodulated signals to the 
control unit 220. Moreover, optionally, during the 
performance of the selected function, the transceiver 
unit 210 can modulate signals or information provided 
from the control unit 220 and transmit the modulated 

35 signals or information via the antenna 2 01 to the 
portable terminal 100 . 

The control unit 220 decrypts the demodulated 
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signals provided from the transceiver unit 210 by using 
a cryptographic algorithm stored in the storage unit 
230 to thereby provide control or display signals 
corresponding to the decrypted signals to a host 
5 apparatus 300 via the signal I/O unit 240 while 
outputting functional data derived from the demodulated 
signals to the host apparatus 3 00 via the data 
interfacing unit 250. 

In a preferred embodiment of the present 

10 invention, a time gate scheme is employed to enhance 
the security. In that case, the control unit 220 
compares the time data included in the decrypted 
signals with a time data representing the current time 
in the transceiver 200. As a result of the comparison, 

15 only if the time difference determined by the time data 
transmitted from the portable terminal 100 and that of 
the transceiver 200 is within a predetermined range, 
e.g., a data propagation time from the transceiver unit 
170 or 180 to the control unit 22 0, the transmitted 

20 data from the portable terminal 100 is determined as 
the valid data. In other words, only if the difference 
is equal to or smaller than a predetermined threshold 
value, the control or display signals, or the 
functional data is transferred to the host apparatus 

25 300 via the signal I/O unit 240 or the data interfacing 
unit 250. 

In accordance with another preferred embodiment of 
the invention, verification of data in accordance with 
the inventive time gate scheme is performed by the host 
30 apparatus 300 in lieu of the transceiver 200. In that 
case, the decrypted signals are transferred to the host 
apparatus 300 without being subject to the verification 
of data, which is then carried out at the host 
apparatus 300. 

35 In accordance with the time gate scheme of the 

invention, the current times of the portable terminal 
100 and the transceiver 200 (or the host apparatus 300) 
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are periodically synchronized and, therefore, are set 
to be identical all the time. Further, the current 
time at an instance when the portable terminal 100 
encodes or encrypts the transaction information is 
5 included therein and then compared with the current 
time at an instance when the transceiver 200 or the 
host apparatus 300 receives the transaction 
information. Accordingly, the security of the 

transaction is highly preserved since an unauthorized 

10 user cannot reuse the transmission signals obtained 
accidently or intentionally from the communication 
channel or network unless he or she decrypts the whole 
transmission signals and makes up new transmission 
signals by replacing the current time data. The 

15 inventive time gate scheme can provide enhanced 
security but is simple and easy to implement because 
time synchronization of the system can be achieved by 
existing communication networks , e.g., CDMA 
PCS (personal communications services) networks, without 

20 having to employ additional complicated time 
synchronization schemes as in the prior art and time 
data itself is directly compared with the current time 
of the receiving end without using rather complex time- 
based codes . 

25 In a preferred embodiment, the current time at the 

portable terminal 100 and the current time at the 
transceiver 200 (or the host apparatus 300) can be 
synchronized by time synchronization data provided by 
base stations or a satellite in, e.g., existing CDMA 

30 communication networks. Therefore, as can be seen 
above, the inventive time gate scheme can be employed 
in the preferred embodiments if desired by way of 
incorporating a device into either the transceiver 20 0 
or the host apparatus 300 capable of receiving the time 

35 synchronization data. 

Referring back to Fig. 1, the associated 
operations of the portable terminal 100 and the 
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transceiver 200 will be more specifically explained 
hereinafter. 

Prior to all of operations, a user first sets the 
portable terminal 100 to a fingerprint registration 
5 mode by manipulating the data entry unit 120 and 
registers his/her fingerprint data f produced by 
scanning the user' s fingerprint through the use of the 
fingerprint scanning unit 110, in the storage unit 160 
to accomplish the fingerprint registration process. 
The fingerprint data are encrypted and then stored in 
order to avoid being revealed to unauthorized users 
when the portable terminal 100 is lost or stolen. 

Some of the functions which can be provided by the 
portable terminal 100 may not need the fingerprint 
authentication depending on the levels of security they 
require, as will be described with reference to the 
embodiments of Figs. 2 to 8 . For instance, if a 
transaction or a function does not involve a large 
amount of money and the security level required is not 
critical, the fingerprint authentication process can be 
omitted for the sake of convenience . For the purpose 
of illustration, however, it is assumed that the 
fingerprint authentication process is required and the 
process is generally described hereinbelow. 

After completing the fingerprint registration 
process, if a user places a finger on the fingerprint 
scanning unit 110 by which a fingerprint of the finger 
is scanned, fingerprint feature data corresponding to 
the user's finger are generated and then provided to 
the control unit 150 via the interfacing unit 140. 

Upon receiving the fingerprint data provided 
thereto, the control unit 150 compares the fingerprint 
data with the registered fingerprint data previously 
stored in the storage unit 160 so as to determine 
whether the user is an authorized user or not. 

If the result of the comparison is negative, i.e., 
if the user is determined as not to be the authorized 
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user, the control unit 150 terminates the fingerprint 
authentication process and instructs the display unit 
13 0 to display thereon a message representing the 
failure of the fingerprint authentication. 

On the other hand, if the result of the comparison 
is positive, i.e., if the user is determined as the 
authorized user, the control unit 150 encrypts 
transaction information including the fingerprint data, 
the current time data of the portable terminal 100, the 
transaction data representing the content of a function 
to be carried out and required in performing the 
function, the personal identification data which may 
include a card number, an account number, password or 
the like required in performing the function, or a 
combination thereof by using the cryptographic 
algorithm stored in the storage unit 160 . The control 
unit 150 then outputs the encrypted information to the 
direct or local communication transceiver unit 170 or 
the base station communication transceiver unit 180 
while displaying a message showing that the function or 
the transaction is under process on the display unit 
130. 

In the preferred embodiment of the invention, the 
personal identification data for each function are all 
prestored in the storage unit 16 0 and, therefore, need 
not be inputted by the user on a function basis. The 
transaction data may also be generated automatically 
without requiring a user's input. In some 

applications, however, at least some of the transaction 
data may need to be inputted by the user. For 
instance, if a function being performed is of a tele- 
banking, the user may have to make a selection among 
services provided or have to input a transaction 
account. In such a case, the control unit 150 prompts 
the user to input data by delivering the requisite 
message on the display unit 130. 

At this time, if the user provides some data 
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within a preset time after being prompted by- 
manipulating the data entry unit 120, information 
corresponding to the input data is also encrypted and 
included in the transaction information by the control 
5 unit 150; and the encrypted information is provided to 
the direct or local communication transceiver unit 170 
or the base station communication transceiver unit 180. 
Herein, if there is no input data from the data entry- 
unit 120 within the preset time after being urged, the 

10 function or the transaction is terminated. 

The processing order of the above operations can 
be changed in accordance with the embodiments of the 
present invention. That is, the data entry operation 
can be performed prior to the fingerprint 

15 authentication . 

In a case of the local area communication, data 
transmission between the portable terminal 100 and the 
transceiver 200 may be carried out by the infrared ray 
signals. In that case, the antenna 101 would be to be 

20 of the type implemented by a photo diode and a photo 
detector. 

The transceiver unit 210 receives the modulated 
signals transmitted through the communication channel 
from the portable terminal 100; demodulates the 

25 received signals; and transfers the demodulated signals 
to the control unit 220. Herein, when the signals are 
transmitted in the form of the infrared ray signals, 
the antenna 201 is also of the type implemented by a 
photo diode and a photo detector. 

30 The control unit 220 decrypts the demodulated 

signals provided from the transceiver unit 210 through 
the use of the cryptographic algorithm stored in the 
storage unit 230; constructs the original information 
corresponding to the encrypted information output ted 

35 from the portable terminal 100 based on the decrypted 
signals; and provides the reproduced information to the 
host apparatus 300 via the signal I/O unit 240 or the 
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data interfacing unit 250 according to the 
characteristics of the reproduced information. 

In accordance with another preferred embodiment of 
the invention, prior to delivering the reproduced 
5 information to the host apparatus 300, the inventive 
time gate scheme and/or the fingerprint authentication 
process can be performed at the transceiver 200. In 
that case, the time gate scheme is accomplished as 
described above in detail and the fingerprint 

10 authentication process is carried out by the control 
unit 220 in the same manner as in the portable terminal 
100 based on the fingerprint data included in the 
reproduced inf ormation and the fingerprint data 
prestored in the storage unit 230. In this case, 

15 registration of the fingerprint data in the storage 
unit 230 can be accomplished by using an external 
fingerprint scanning apparatus which can be connected 
to the transceiver 200. 

Hereinafter, referring to Figs. 2 to 8, there are 

20 illustrated exemplary embodiments of the present 
invention, which will be explained in conjunction with 
Fig. 1. 

Referring to Fig. 2, there is illustrated a first 
exemplary embodiment of the present invention applied 
25 in remote- starting of an automobile. The inventive 
transceiver 2 00 is connected to an automatic engine 
starter 400 . 

The automatic engine starter 400 can be of a kind 
being used in conventional remote-controlled vehicle 

30 engine starting systems. In such a case, the portable 
terminal 10 0 acts as a remote control transmitter for 
providing an engine start signal; the transceiver 200, 
a receiver for capturing and feeding the transmitted 
engine start signal to the automatic engine starter 

35 400; and the automatic engine starter 400, an engine 
starting circuit for starting the engine in response to 
the transmitted engine start signal. 
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In this embodiment, if the automatic vehicle 
starting function is selected, e.g., by inputting a 
corresponding code via the data entry unit 120 so that 
the portable terminal 100 is initiated to perform the 
5 selected vehicle starting function, fingerprint data of 
a user of the portable terminal 100 are provided 
through the fingerprint scanning unit 110 and provided 
to the control unit 150 via the interfacing unit 140. 
Upon successful fingerprint authentication, the control 

10 unit 150 retrieves from the storage unit 160 and 
encrypts a vehicle starting signal containing the 
fingerprint data. The encrypted signal is modulated at 
the direct communication transceiver unit 170 and then 
transmitted to the transceiver 200 through the 

15 communication channel, i.e., the air. This embodiment 
assigns about 300 bytes to the transmission of the 
vehicle starting signal. 

Once the transceiver 200 receives the modulated 
signal, the control unit 220 compares the fingerprint 

20 data detected from the received signal with registered 
fingerprint data stored in the storage unit 230. If 
the result of the comparison is positive, i.e., the 
fingerprint authentication is accomplished, a control 
signal is provided to the automatic engine starter 400 . 

25 Then, the automatic engine starter 400 automatically 
starts the engine of the vehicle in response to the 
control signal. Also, the automatic engine starter 
400 may include appropriate circuits for automatically 
operating various accessory electrical equipment in the 

30 vehicle such as the headlights, heater, air 
conditioner, defroster, etc. Since the operation of 
the automatic engine starter 400 is similar to that of 
an engine starting circuit of a conventional remote- 
controlled vehicle engine starting system, the 

35 explanation thereof will not be repeated for the sake 
of simplicity . 

In this embodiment, the fingerprint data need be 
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prestored in the storage unit 230. In that case, 
registration of the fingerprint data can be 
accomplished prior to installing the transceiver 200 in 
the automobile by using an external fingerprint 
5 scanning apparatus which can be connected to the 
transceiver 200. The security level required in this 
embodiment may not be so critical, and, therefore, the 
time gate scheme of the invention may not be employed 
in this embodiment. The time gate scheme, however, can 
10 be employed in this embodiment if desired by way of 
incorporating a device into the transceiver 200 capable 
of receiving the time synchronization data from a base 
station. 

In another embodiment of the present invention 

15 applied in the remote- starting of the automobile, the 
fingerprint authentication process may be performed 
only at the portable terminal 100. In that case, the 
storage unit 230 does not need store the registered 
fingerprint data therein and fingerprint data need not 

20 be included in the vehicle starting signal transmitted 
from the portable terminal 100 . 

Although the above embodiment has been described 
with reference to the automatic vehicle engine starting 
function, it is to be understood that the present 

25 invention can be applied to any machinery which 
requires the automatic starting operation. 

Now, referring to Fig. 3, there is illustrated a 
second exemplary embodiment of the present invention 
applied in a remote-controlled door lock system which 

30 remotely unlocks or locks an automatic door. Herein, 
the transceiver 200 is connected to an actuator 500. 

The actuator 500 can be also of a kind being used 
in conventional remote-controlled door lock systems. 
In such a case, the portable terminal 100 simply acts 

35 as a remote control transmitter for providing a door 
lock control signal; the transceiver 200, a receiver 
for capturing and feeding the transmitted door lock 
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control signal to the actuator 500; and the actuator 
500, a door lock circuit for locking or unlocking the 
automatic door in response to the transmitted door lock 
control signal . 

5 The operation of the present invention related to 

the remote-controlled door lock system is similar to 
that of the first embodiment. That is, if the remote- 
controlled door lock function is selected, e.g., by 
inputting a corresponding code via the data entry unit 

10 120, the portable terminal 100 is initiated to perform 
the selected door lock function. Thereafter, a door 
lock control signal containing fingerprint data of a 
user are transferred to the transceiver 200 through the 
communication channel, i.e., the air, only if the 

15 fingerprint authentication is successfully 
accomplished. 

Once the transceiver 200 receives the door lock 
control signal transmitted from the portable terminal 
100, the control unit 220 detects the fingerprint data 

20 of the user from the received door lock control signal 
and compares them with registered fingerprint data 
prestored in the storage unit 230. If the result of 
the comparison is positive, i.e., the fingerprint 
authentication is accomplished, a control signal is 

25 provided to the actuator 500. Then, the actuator 500 
automatically locks or unlocks the automatic door in 
response to the control signal . 

In this embodiment, the fingerprint authentication 
at the transceiver 200 may not be employed as in the 

30 first exemplary embodiment. Further, the time gate 
scheme may be or may not be employed as in the first 
exemplary embodiment . 

Referring to Fig. 4, there is illustrated a third 
exemplary embodiment of the present invention applied 

35 in ATM systems, wherein the portable terminal 100 
performs an ATM card function and is used in lieu of a 
machine -readable identification card such as a credit 
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card or an ATM card. In this embodiment, the 
transceiver 200 is connected to an ATM 600 and a 
predetermined portion of the storage unit 160 is 
assigned to store data or information, such as a card 
5 number, password, etc., required to perform the ATM 
card function. 

Specifically, if the ATM card function is 
selected, e.g., by inputting a corresponding code via 
the data entry unit 120, the portable terminal 100 is 

10 initiated to perform the selected ATM card function. 
Then, upon the successful fingerprint authentication, 
the portable terminal 100 transmits transaction 
information through the direct communication 
transceiver unit 170 to the transceiver 200 connected 

15 to or embodied in the ATM 600, wherein the transaction 
information includes, but is not limited to, a 
corresponding card number and password, which are 
stored in the storage unit 160. 

Once the transaction information is fed to the 

20 transceiver 200, the control unit 220 decrypts the 
transmitted transaction information and, then, the 
decrypted transaction information is transferred to the 
ATM 600 without being subject to the verification of 
data, which is carried out at the ATM 600 based on the 

25 decrypted transaction information as in the prior art. 

If the access to the ATM 600 is permitted through the 
data verification at the ATM 600, the user can 
accomplish the desired banking transactions by 
operating the ATM 600 in the same manner as in the 

30 prior art using the ma chine -readable identification 
cards. The transactional operations at the ATM 600 is 
not germane to the subject invention and, therefore, 
the details thereof will not be described for the sake 
of simplicity. 

35 in another preferred embodiment of the present 

invention applied to the ATM system, the fingerprint 
authentication is employed. In that case, after the 
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successful fingerprint authentication, the portable 
terminal 100 provides the transceiver 200 with 
transaction information which further includes the 
fingerprint data of the verified user. 
5 Once the transaction information is fed to the 

transceiver 200, the control unit 220 decrypts the 
transmitted transaction information including the 
fingerprint data and provides the decrypted transaction 
information via the ATM GOO to a host banking 

10 computer (not shown) connected to the ATM 600. In this 
case, the host banking computer carries out the 
verification of the transaction information by further 
comparing the fingerprint data included in the 
transaction information with registered fingerprint 

15 data recorded in authorized user files in the host 
banking computer through the fingerprint authentication 
process depicted above. As a result, if the user is 
verified as an authorized user, the desired banking 
transactions are performed in the same manner as in the 

20 prior art. 

In further another preferred embodiment, the 
present invention can employ the time gate scheme for 
enhancing the security of the banking transactions 
instead of or together with the fingerprint 

25 authentication. In that case, the time gate scheme may 
be performed by way of the transceiver 200, the ATM 600 
and the host banking computer if they are provided with 
devices for capturing the time synchronization data so 
that the time thereat is synchronized with that at the 

30 portable terminal 100. However, it may be most 
preferably that the time comparison is carried out at 
the host banking computer. 

Referring to Fig. 5, there is illustrated a fourth 
exemplary embodiment of the present invention applied 

35 to a phone banking. The transceiver 2 00 is connected 
to or embodied in a host banking computer 700 and a 
predetermined portion of the storage unit 160 of the 
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portable terminal 100 is assigned to store data or 
information required to perform the phone banking. 

For the phone banking, the security of the banking 
transactions is of vital importance since an 
5 unauthorized user may be able to obtain access to user 
identification information by electronic eavesdropping, 
reducing the security provided by this banking system. 
Therefore, this embodiment utilizes the time gate 
scheme described above together with the fingerprint 

10 authentication to improve its security. 

In accordance with this embodiment, if a user 
chooses the phone banking function to thereby set up 
the call connection to the host banking computer 7 00 
and initiate the phone banking function by way of, 

15 e.g., inputting a corresponding code number or calling 
the host banking computer 700 and the portable terminal 
100 determinates the user to be an authorized one as a 
result of the fingerprint authentication process, 
transaction information, including, but not limited to, 

20 the personal identification data having a user's 
identification number, an account number, password, 
etc., the user's fingerprint data and the time data 
representing a current time at the portable terminal 
100, are encrypted and modulated at the portable 

25 terminal 100. The modulated signals are then 

transmitted via a base station 750 to the transceiver 
200 connected, e.g., between a host banking computer 
700 and the base station 750. 

Once the modulated signals are inputted to the 

30 transceiver 200, the control unit 220 demodulates and 
decrypts the received signals to restore the original 
transaction information and transfers the decrypted 
transaction information to the host banking computer 
700. 

35 if the decrypted transaction information is 

coupled thereto, the host banking computer 7 00 performs 
the data verification, the fingerprint authentication 
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and the time gate processes as described in the third 
embodiment . 

If the current user is determined as an authorized 
user as the results of the data verification, the 
5 fingerprint authentication and the time gate processes, 
requested transactions can be accomplished between the 
portable terminal 100 and the host banking computer 700 
by transceiving required information therebetween as in 
the prior art. 

10 Referring to Fig. 6, there is illustrated a fifth 

exemplary embodiment of the present invention 
incorporating transport, e.g., bus and/or subway, card 
functions in the portable terminal 100, which can be 
used to pay transport fares instead of conventional 

15 transport cards. For this embodiment, a predetermined 
portion of the storage unit 160 is assigned to store 
data or information required to perform the transport 
card functions and the data transmission of the 
portable terminal 100 is accomplished via the direct 

20 communicating transceiver unit 170 since the portable 
terminal 100 for this embodiment is operable only when 
it is placed close to a transport card terminal 800. 

In this embodiment, when the portable terminal 100 
is placed within a predetermined distance from the 

25 transport card terminal 800, the portable terminal 100 
is automatically initiated to perform the transport 
card function, e.g., by receiving an establishing 
signal which is continuously broadcasted from the 
transceiver 200. 

30 For instance, in case the portable terminal 100 is 

used instead of a bus card which is of a prepaid card, 
a prepaid amount of money is recorded in a 
predetermined portion of the storage unit 160 in the 
portable terminal 100. After then, when the portable 

35 terminal 100 is positioned within the predetermined 
di stance from the transport card terminal 800, the 
portable terminal 100 is automatically set to perform 
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the bus card function and a bus fare is transferred 
together with portable terminal information from the 
portable terminal 100 to the transport card terminal 
800 via the direct communicating transceiver unit 170 
5 and the transceiver 200. The prepaid amount of money- 
is then updated by deducting the bus fare therefrom. 

In case the portable terminal 100 contains a 
subway card function therein, the portable terminal 100 
is automatically set to perform the subway card 

10 function by receiving the establishing signal 
broadcasted from the transceiver 200 when the portable 
terminal 100 is placed within the predetermined 
distance from the transport card terminal 800. And 
then, since the subway card function is generally 

15 combined to a credit card, credit card information 
previously stored in a predetermined portion of the 
storage unit 16 0 of the portable terminal 100 is 
extracted and transmitted to the transceiver 200. 

If the encrypted credit card information is 

20 transferred thereto, the transceiver 200 decrypts the 
encrypted credit card information and provides the 
decrypted information to the transport card terminal 
800 through the data interfacing unit 250. Then, the 
transport card terminal 800 performs the remaining 

25 processes to accomplish the subway card function as in 
the prior art . 

In order to enhance the security, the transport 
card function can be performed after authenticating 
fingerprint data of a user at the portable terminal 

30 100. That is, before transmitting the portable 
terminal information or the credit card information, 
the fingerprint data of the user are inputted to the 
portable terminal 100 through the fingerprint scanning 
unit 110 and the portable terminal 100 performs the 

35 fingerprint authentication by comparing the inputted 
fingerprint data with the registered fingerprint data 
stored in the storage unit 160. After the fingerprint 
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authentication is successfully accomplished, the 
required information, i.e., the portable terminal 
information or the credit card information, can be 
transmitted from the portable terminal 100 to the 
5 transport card terminal 800. 

Referring to Fig. 7, there is illustrated a sixth 
exemplary embodiment of the present invention 
incorporating a prepaid card, a debit card or a credit 
card function, an electronic money or a combination 

10 thereof in the portable terminal 100 to purchase a 
desired product from a vending machine 900. Similarly 
to the above illustrated embodiments, a predetermined 
portion of the storage unit 160 is assigned to store 
data or information required to implement this 

15 embodiment . 

In this embodiment, if this function is selected, 
e.g., by inputting a corresponding code via the data 
entry unit 12 0 so that the portable terminal 100 is 
initiated to perform the selected function, a user 

2 0 inputs a preset amount of money to be needed to use the 
vending machine 900 by using the data entry unit 120 
and chooses a payment method among the various card 
function and the electronic money. After the above 
processes are performed, the control unit 150 encrypts 

25 and modulates the preset amount of money together with 
payment information corresponding to the chosen payment 
method, e.g., card information, and then transmits the 
modulated information to the transceiver 200 connected 
to or embodied in the vending machine 900. 

30 The transceiver 200 demodulates and decrypts the 

received information to provide the decrypted 
information to the vending machine 900 via the data 
interfacing unit 250 so that the user can obtain 
products corresponding to the preset amount of money 

35 from the vending machine 900. 

In accordance with another embodiment of this 
function, in order to enhance the security, the 
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fingerprint authentication process is performed at the 
portable terminal 100 before transmitting the modulated 
information. As a result, if the fingerprint 

authentication is successfully accomplished, the 
5 modulated information can be transmitted to the 
transport card terminal 800. 

Referring to Fig. 8, the present invention can be 
associated with a VAN terminal 950 to pay a fare or a 
price of a product by using the portable terminal 100 

10 having a credit card function therein. This embodiment 
also has a predetermined portion of the storage unit 
160 assigned to store data or information required to 
implement the credit card function . 

First of all, if this credit card function is 

15 selected, e.g., by inputting a corresponding code via 
the data entry unit 120, the portable terminal 100 is 
initiated to perform the selected credit card function. 
After then, if a price to be paid is inputted to the 
VAN terminal 1100, the price is transferred to the 

20 portable terminal 100 via the transceiver 200 and 
displayed on the display unit 130 of the portable 
terminal 100. Then, if a user sequentially provides 
installment information and fingerprint data to the 
portable terminal 100 through the data entry unit 120 

25 and the fingerprint scanning unit 110, respectively, 
the installment information and the fingerprint data 
are encrypted together with card information retrieved 
from the storage unit 160 and then transmitted to the 
transceiver 200 via the direct communication 

30 transceiver unit 170. 

The transceiver 200 decrypts the encrypted 
information transmitted from the portable terminal 100 
and delivers the decrypted information to the VAN 
terminal 950 through the data interfacing unit 250. 

35 The VAN terminal 950 transfers the installment 

information, the price of the product, the card 
information and the fingerprint data to a VAN 
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company (not shown) in order to get a transactional 
permission. In accordance with this embodiment, the 
VAN company performs a transaction authentication based 
on the fingerprint data and the card information in 
5 order to determine whether or not permitting the 
required transaction. 

If the transaction is permitted and a permission 
number therefor is received from the VAN company, the 
VAN terminal 950 transfers the permission number to the 

10 transceiver 200, which then encrypts the permission 
number and transmits it to the portable terminal 100 . 
The portable terminal 10 0 receives the transmitted 
permission number and displays it on the display unit 
130. Through the processes, the transaction is 

15 completed. 

In accordance with another embodiment, the 
fingerprint data may be used for the user 
authentication only at the portable terminal 100 
without being transmitted to the transceiver 200. 

20 If the portable terminal 100 incorporates therein 

an electronic money function, it is possible to 
transfer money between two portable terminals situated 
nearby. For instance, if a user of a portable terminal 
wants to send a predetermined amount of money to a use 

25 of another portable terminal, the user of the first 
portable terminal selects the electronic money transfer 
function by inputting a corresponding code and then 
inputs a predetermined amount of money to be 
transferred and an identification information verifying 

30 the second portable terminal, e.g., a telephone number. 

Thereafter, the user of the first portable terminal 
provides his or her fingerprint data through the 
fingerprint scanning unit 110 for fingerprint 
authentication. After the authentication is 

35 successfully accomplished and the first portable 
terminal is connected to the second portable terminal, 
the first portable terminal transmits an instruction 
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signal to the second portable terminal through the 
direct communication transceiver unit 170. The second 
portable terminal prepares a money transmission 
protocol in response to the instruction signal and 
5 sends a ready signal representing that the second 
terminal is ready to accept the money to be 
transferred. Once the first portable terminal receives 
the ready signal from the second portable terminal to 
thereby recognize that the protocol is prepared, the 

10 first portable terminal sends transfer data 
representing the predetermined amount of money being 
transferred to the second portable terminal . Upon 
receiving the transferred data, the second portable 
terminal issues a transfer completion signal indicating 

15 a safe receipt of the transferred money at the second 
portable terminal and stores a sum of the amount of 
money transferred and the previous amount of money 
stored in a storage thereof. Meanwhile, the first 
portable terminal receives the transfer completion 

20 signal from the second portable terminal and stores 
therein an amount of money determined by subtracting 
the amount of money transferred from the previous 
amount of money stored in a storage thereof if the 
successful money transfer is verified between the first 

25 portable terminal and the second portable terminal. It 
is to be understood that the electronic money transfer 
described above can be achieved between two portable 
terminals spaced apart via a base station. 

It is to be understood that the portable terminal 

3 0 100 can selectively employ one of the direct 
communication transceiver unit 170 and the base station 
communication transceiver unit 180. If only the direct 
communication transceiver unit 170 is employed in the 
portable terminal 100, the portable terminal 100 can 

35 perform functions associated with local area 
communications only. On the other hand, if only the 
base station communication transceiver unit 180 is 
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employed in the portable terminal 100, all the 
functions described above can be accomplished via a 
base station. 

In a preferred embodiment of the invention, the 
5 aforementioned functions are preferably implemented by 
using a wireless portable phone, e.g., a PCS phone, a 
cellular phone or the like, further employing the 
direct communication transceiver unit 170 and the 
fingerprint scanning unit 110 therein. However, a 

10 terminal, which employs the direct communication 
transceiver unit 170 and optionally incorporates the 
fingerprint scanning unit 110, can also accomplish the 
above functions other than the phone banking requiring 
the long-distance communication. Therefore, it will be 

15 apparent to those skilled in the art that the portable 
terminal 100 can be of a type other than a wireless 
portable phone . 

In the preferred embodiment of the invention, the 
signals or data transmitted between the transceiver 200 

20 and a conventional host apparatus, e.g., an automatic 
vehicle starting apparatus, an ATM, a transport card 
terminal, a VAN terminal, or the like, are preferably 
of the types identical to those of the signals or data 
between the host apparatus and conventional 

25 input/output terminals thereof; and the transceiver 200 
is coupled to the conventional host apparatus in 
parallel with the conventional input/output terminals 
thereof. In this way, the inventive transceiver 200 
can be easily incorporated with the conventional host 

30 apparatus. That is, by using the transceiver 200 
generating the signals or data identical to those for 
the conventional apparatus, it is possible to perform 
a related function between the above inventive wireless 
portable terminal and the conventional host apparatus 

35 without altering the configuration thereof. 

In order to select specific functions to be 
performed by the portable terminal 100, two selection 
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schemes are employed as described above: one is that a 
user selects a specific function by inputting a 
selection code corresponding to the specific function 
through the data entry unit 120; and the other is that 
5 the transceiver 200 specified to the host system 
performing the specific function continuously 
broadcasts an establishing signal in a predetermined 
narrow area close thereto and, then, the portable 
terminal 100 receives the establishing signal to 

10 thereby perform the specific function in response to 
the establishing signal . Even though each function has 
been described as being activated by only one of the 
two schemes in the present invention, it is to be 
understood that the portable terminal 100 can be 

15 devised to initiate each function by the other one of 
the schemes or by both the schemes . 

In another embodiment of the present invention, 
biometric data other than the fingerprint data can be 
used for the user's authentication. 

20 While the present invention has been described 

with respect to the particular embodiments, it will be 
apparent to those skilled in the art that various 
changes and modifications may be made without departing 
from the spirit and scope of the invention as defined 

25 in the following claims. 
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What is claimed is: 

1. A multi-functional portable device for performing 
various functions in conjunction with more than one 

5 different host systems, the portable device performing 
at least one specific function with a host system and 
communication between the portable device and the host 
system being carried out by wireless signals, 
comprising : 

10 a storage unit for storing at least a portion of 

information required in performing said at least one 
specific function; and 

a transceiver unit for transmitting the 
information to the host system in a form of an 

15 encrypted signal. 

2. The multi-functional portable device as recited in 
claim 1 further comprising: 

means for selecting said at least one specific 
20 function. 

3 . The multi-functional portable device as recited in 
claim 2, wherein the selecting means is a data entry 
unit . 

25 

4. The multi-functional portable device as recited in 
claim 2, wherein the host system has means for 
generating an establishing signal and the selecting 
means chooses said at least one specific function in 

30 response to the establishing signal. 

5. The multi-functional portable device as recited in 
claim 2 further comprising: 

a fingerprint scanning unit for providing a 
35 fingerprint data of a user. 

6. The multi-functional portable device as recited in 
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claim 5, wherein a registered fingerprint data is 
prestored in the storage unit . 

7. The multi-functional portable device as recited in 
5 claim 6, wherein the encrypted signal is sent to the 
host system only if the registered fingerprint data and 
the fingerprint data of the user are determined to be 
identical . 



10 8. The multi-functional portable device as recited in 
claim 7, wherein the information includes one of the 
registered fingerprint data and the fingerprint data of 
the user. 



15 9. The multi-functional portable device as recited in 
claim 8, wherein the host system has fingerprint data 
and said at least one specific function is accomplished 
only if the fingerprint data included in the encrypted 
signal is determined to be identical to the fingerprint 

20 data in the host system. 

10. The multi-functional portable device as recited in 
claim 7, wherein a time at the portable device is 
synchronized with that at the host system and the 

25 information includes time data representing a time at 
which the portable device generates the encrypted 
signal . 

11. The multi-functional portable device as recited in 
30 claim 10, wherein said at least one specific function 

is accomplished only if the time represented by the 
time data and a time at which the host system receives 
the encrypted signal is within a predetermined range. 

35 12. The multi-functional portable device as recited in 
claim 8, wherein a time at the portable device is 
synchronized with that at the host system and the 
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information includes time data representing a time at 
which the portable device generates the encrypted 
signal . 

5 13. The multi-functional portable device as recited in 
claim 12, wherein the host system has fingerprint data 
and said at least one specific function is accomplished 
only if the fingerprint data included in the encrypted 
signal is determined to be identical to the fingerprint 
10 data in the host system and the time represented by the 
time data and a time at which the host system receives 
the encrypted signal is within a predetermined range. 

14. The multi-functional portable device as recited in 
15 claim 7, wherein the transceiver unit is for a local 

area communication and the portable device communicates 
with the host system directly. 

15. The multi-functional portable device as recited in 
20 claim 7, wherein the portable device is a wireless 

phone and the transceiver unit is for a long-distance 
communication and wherein the portable device 
communicates with the host system via a base station. 

25 16. The multi-functional portable device as recited in 
claim 14 further comprising a transceiver device for a 
long-distance communication, wherein the portable 
device is a wireless phone and communicates with the 
host system directly through the use of the transceiver 

30 unit or communicates with the host system via a base 
station through the use of the transceiver device. 

17. A transceiver, incorporated with a host apparatus, 
for enabling a function to be carried out between the 
35 host apparatus and a multi-functional portable 
terminal, the portable terminal transmitting an 
encrypted signal representing information required in 
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performing the function, comprising: 

a control unit for decrypting the encrypted signal 
to reconstruct the information; and 

a data interfacing unit for providing the 
5 reconstructed information to the host apparatus . 

18 . The transceiver according to claim 17 further 
comprising: 

means for generating an establishing signal, 
10 wherein the function is selected at the portable 
terminal in response to the establishing signal. 

19. A wireless communication system including a multi- 
functional portable device and more than one host 

15 systems, wherein the portable device performs various 
functions in conjunction with the host systems, the 
portable device performing at least one specific 
function with a host system and the host system having 
a transceiver and a host apparatus, the portable device 
20 comprising: 

a storage unit for storing at least a portion of 
information required in performing said at least one 
specific function,- and 

a transceiver unit for transmitting the 
25 information to the host system in a form of an 
encrypted signal, and 

the transceiver comprising: 

a control unit for decrypting the encrypted signal 
to reconstruct the information; and 
30 a data interfacing unit for providing the 

reconstructed information to the host apparatus. 

20. The wireless communication system as recited in 
claim 19, wherein the portable device further 

35 comprising: 

means for selecting said at least one specific 
function. 
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